Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: rsmeItMkgNxQsdf17Nvrv8EdRkhpoQu6lmVLXeh4J9Y=
Subject key identifier: 3B:95:A0:63:5B:53:B8:DC:E9:D8:FC:15:EF:7C:EC:95:32:B0:A2:01
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019E1DFE60FCC6CA678A2657A8F9CCF32909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 0331
Signing time: Tue 12 May 2026 21:01:10 +0000
Manifest this update: Tue 12 May 2026 21:01:10 +0000
Manifest next update: Wed 13 May 2026 21:01:10 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: HIrvc+I+wfitlEPxJFpvQnT59730ug9qUDDjzxbiNk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:60:fc:c6:ca:67:8a:26:57:a8:f9:cc:f3:29:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: May 12 21:01:10 2026 GMT
Not After : May 13 21:01:10 2026 GMT
Subject: CN=3b95a0635b53b8dce9d8fc15ef7cec9532b0a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:97:27:5c:fc:c8:6a:bc:53:cd:99:7f:60:
af:9a:b9:9b:3e:03:c5:9c:99:57:0d:2b:5c:b9:fa:
8b:7e:5a:1c:55:60:9a:a8:db:a0:d7:29:e4:e6:d1:
ce:57:cd:68:99:6c:9e:39:08:99:0d:19:4a:27:28:
1e:5b:db:b6:73:03:19:a7:c8:4b:e8:6f:e7:29:5c:
15:a0:fd:51:cd:13:da:aa:e3:77:f0:9f:cf:80:76:
4b:3a:29:1a:9d:28:a8:ff:49:2f:92:a0:b3:2b:7d:
ee:af:c0:38:29:ee:51:df:43:35:0c:05:d4:d9:e7:
3e:4c:5e:ed:40:af:33:03:4e:67:18:8c:6e:50:f0:
ba:c7:09:a9:eb:2d:86:a3:67:96:2b:93:0d:e7:e1:
17:d7:5d:fa:d8:48:f9:24:47:bf:65:39:c8:71:97:
8f:0d:19:cd:20:fd:e5:d4:1a:f7:3c:4b:bd:dd:33:
14:08:c5:7e:dd:ff:60:64:20:a1:ae:d9:2d:13:2e:
b7:b4:aa:e7:f3:6e:87:49:da:f3:c1:f7:4c:c9:6b:
9a:1a:63:1a:19:89:d3:db:fd:70:49:01:7a:3a:a3:
60:cb:75:3e:c0:66:82:d9:6b:c1:b4:ed:16:a6:74:
fc:bd:ca:77:9c:dc:71:f1:7f:a7:ef:09:de:71:c3:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:A0:63:5B:53:B8:DC:E9:D8:FC:15:EF:7C:EC:95:32:B0:A2:01
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:97:b6:2a:99:b3:81:cf:c4:c1:d2:a3:9e:d5:8b:33:70:f5:
15:bd:cc:af:51:10:cc:5f:a9:d8:bd:cc:12:a6:37:24:1c:8e:
41:ec:56:07:37:86:2a:79:ac:df:2b:58:49:df:15:40:d7:e9:
ec:53:3c:65:5b:67:78:b8:e8:a7:6b:ce:59:10:76:5d:8f:a1:
60:c1:3f:04:fa:68:9b:1f:bd:11:e4:79:e2:f8:35:c5:e1:f7:
b1:4d:3d:80:97:69:27:8f:d3:92:df:f3:0b:19:39:aa:a2:8b:
d1:0f:c8:31:03:ad:15:dd:98:c4:4e:5b:1b:99:c0:2c:97:61:
60:39:a9:a9:62:e1:a9:a6:ec:2a:6e:da:52:37:11:51:d9:56:
68:ba:38:bb:1d:17:3b:2a:b7:2c:f1:c9:0f:c2:cd:e4:89:67:
49:c7:bd:ff:8c:88:40:89:89:f5:79:b2:c6:32:d5:ec:c4:ad:
18:f3:f5:58:46:9c:3d:fb:23:7a:ff:06:4d:61:38:ba:8f:a2:
f0:10:2c:a4:92:e0:ce:80:85:43:1f:b3:95:3a:4f:bb:81:e1:
1e:74:dd:52:08:e0:00:62:7d:e7:d7:37:33:2b:10:70:93:74:
7a:3f:ac:9a:5f:40:6c:7a:8c:0b:51:94:fb:1c:04:02:1b:7b:
60:ab:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:27 2026 by rpki-client